adguard-mcp@0.3.2

CAUTION

Publisher claims: "Operator control CLI for AdGuard Home with an MCP adapter" Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher solomonneas · joined 0 days agoInstalls 16,894Last detonated 1 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH

Outbound HTTP to raw IP addressREADME.md:125 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:226 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:148 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathsREADME.md:217 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:164 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:229 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:44 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

URL using raw IP addressREADME.md:59 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressREADME.md:125 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

npx invocation of non-well-known packageREADME.md:195 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:130 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressREADME.md:130 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

npx invocation of non-well-known packageREADME.md:47 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:59 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressREADME.md:229 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressREADME.md:148 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:279 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04